Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
File:                     Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft (raw, json)
Hash identifier:          Q/yS6j5H5wk1vP9MuasnHw4OkSJVE8vmqlQETbZ0ilA=
Subject key identifier:   38:34:BD:CE:26:9E:5F:10:B1:94:A0:FA:F3:00:4D:2E:8D:31:38:35
Authority key identifier: 62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
Certificate issuer:       /CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Certificate serial:       01A180AB66CDC544409FC2A5A3022632C98A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
Manifest number:          02B7
Signing time:             Wed 28 Oct 2026 04:01:18 +0000
Manifest this update:     Wed 28 Oct 2026 04:01:18 +0000
Manifest next update:     Thu 29 Oct 2026 04:01:18 +0000
Files and hashes:         1: V6kppHtIo247BBTH3uKp26adRoU.roa (hash: r9eyxABr1xQBoWx1fQ1XYssusw5T9eBOHoVdb80YKAw=)
                          2: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl (hash: hamXbcBjn0lYRtcuf8Sbs2Jd9OOxFHjhWWFGco7WDSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 04:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:ab:66:cd:c5:44:40:9f:c2:a5:a3:02:26:32:c9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
        Validity
            Not Before: Oct 28 04:01:18 2026 GMT
            Not After : Oct 29 04:01:18 2026 GMT
        Subject: CN=3834bdce269e5f10b194a0faf3004d2e8d313835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:13:0a:8b:7a:8e:48:a5:a5:72:1a:cb:28:
                    7c:75:cb:c1:e5:03:2c:73:bf:4b:46:a9:ff:56:37:
                    eb:38:2f:7e:a2:9a:e8:f7:ab:f3:e8:04:6e:4d:c2:
                    76:7e:98:ae:0e:3b:78:a2:b9:53:22:94:49:84:2c:
                    74:46:e3:16:b1:3b:80:9c:7a:b3:30:4b:51:b5:3a:
                    21:e7:8e:87:1e:35:1a:ea:b2:80:ae:24:c2:ac:ef:
                    c6:a9:6d:8a:a4:10:a6:21:92:30:0a:4d:bb:90:e7:
                    a9:d6:b3:11:1a:cd:92:33:20:ad:80:76:86:c6:75:
                    e0:ee:e1:9e:72:a9:a1:12:fe:92:58:1a:78:26:d3:
                    2b:01:1e:24:5a:aa:67:2f:47:2a:d1:97:e7:e0:cb:
                    13:06:fa:33:fb:12:10:e7:5d:39:f2:9d:91:85:43:
                    8f:38:21:5d:9b:0c:5d:a5:9c:57:f0:d5:e9:6c:a4:
                    bf:d0:44:88:12:51:d9:51:f3:bb:15:10:82:f8:57:
                    08:b5:83:4e:0b:94:9d:16:1b:dc:f9:e9:ae:17:5f:
                    0c:5d:77:f5:81:33:9a:8a:50:b1:01:12:d2:20:8c:
                    74:ee:1b:e5:2d:9a:d1:04:5d:b1:8a:b4:7e:49:b2:
                    48:b2:d7:73:eb:40:81:5f:45:e3:dc:cb:d2:98:c2:
                    39:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:34:BD:CE:26:9E:5F:10:B1:94:A0:FA:F3:00:4D:2E:8D:31:38:35
            X509v3 Authority Key Identifier:
                keyid:62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:08:63:2c:38:ba:e3:ef:c0:9b:e7:b6:e1:63:a3:2d:0a:5f:
         81:b8:15:72:ea:18:b6:3c:d5:e0:56:56:11:cd:c5:f8:2b:80:
         da:8e:2c:e2:1b:b1:7a:2b:08:c5:22:b1:5e:c3:ba:1f:2d:93:
         c7:b9:f7:e5:fd:f1:70:bb:32:48:52:a7:51:57:2e:af:c0:43:
         86:23:39:00:19:0b:34:98:4f:7a:a9:4b:6c:3c:be:e8:fb:ee:
         6f:86:4a:4d:23:72:94:28:12:7b:fa:1a:a2:bf:b6:42:98:91:
         f6:bc:43:59:d7:8b:17:68:33:ec:45:ab:be:cc:4c:8b:02:93:
         43:a1:59:2e:53:15:ee:1f:e2:74:b1:21:f2:99:f2:9f:62:35:
         e9:26:9f:ac:44:db:d3:4e:de:dc:8c:c6:ab:76:3e:b6:80:3e:
         7a:ff:e8:81:1a:3f:de:ad:38:5d:71:1b:05:84:4e:75:df:79:
         b7:55:0d:ac:94:d9:e2:d6:7f:0e:f2:8d:65:88:58:f9:e8:91:
         32:98:c1:d1:f7:59:ff:e1:fb:53:ce:01:02:db:40:e6:7e:08:
         c4:4f:f6:a4:e7:ec:33:50:b9:8d:7a:25:de:3a:fc:f8:e4:ae:
         9c:24:c2:4b:b3:66:91:cc:a2:a4:e6:02:ad:f3:da:4b:dd:3d:
         b3:34:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:14:28 2026 by rpki-client